Product by Microsoft
Microsoft Exchange Server 2013
10 known vulnerabilities in Microsoft Exchange Server 2013 (Microsoft), 1 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-0688 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 1 other product | 8.8 | |
| Critical | CVE-2019-1373 | Microsoft Exchange Server 2019: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2019-0724 | Microsoft Exchange Server: Privilege Escalation | 8.1 | |
| High | CVE-2019-0686 | Microsoft Exchange Server: Privilege Escalation | 7.4 | |
| High | CVE-2019-1136 | Microsoft Exchange Server: Privilege Escalation | 8.1 | |
| High | CVE-2020-0692 | Microsoft Exchange Server 2013: Privilege Escalation | 8.1 | |
| Medium | CVE-2019-1084 | Microsoft Outlook: Information Disclosure | 6.5 | |
| Medium | CVE-2019-0858 | Microsoft Exchange Server: Spoofing | 6.1 | |
| Medium | CVE-2019-0817 | Microsoft Exchange Server: Spoofing | 5.4 | |
| Medium | CVE-2019-1137 | Microsoft Exchange Server 2016: Cross-Site Scripting (XSS) | 5.4 |